Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-26119
7.5
HIGHCVSS v3
Published
February 22, 2021
CVSS v2
5 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.
smarty-php/smarty
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.< 3.1.39NVD
Packagist